Security & reliability
Security that respects
your team — and your data.
We don't bolt security onto Prax CRM as a premium upsell. Access control, audit trails and encryption are defaults on every plan.
Encrypted in transit & at rest
TLS 1.2+ for every request. All records encrypted at rest with AES-256 on managed infrastructure.
Role-based access
Three tiers — admin, employee, customer — plus designation-level permissions and per-user overrides.
Feature gates
Toggle entire tabs, or just the Add/Edit/Delete buttons inside them. No more "let me get someone who has access".
Audit trail
Every create, edit and delete written to an immutable log. Who, what, when — across every record type.
Session control
See every active login by user and device. Revoke any session instantly from the admin panel.
Frozen snapshots
Payslips and invoices freeze their context at creation — your historical records stay correct forever, even as master data changes.
Data export, anytime
Every table is exportable to CSV or JSON from the admin panel. Your data is yours — including the schema for it.
Hardened dependencies
We ship on Next.js + Convex — two of the most actively maintained stacks in production. Automated security patching, every week.
Principle of least privilege
Default permissions are restrictive. Admins grant, not deny — so nobody gets access they didn't ask for.
Compliance
Where we are on the compliance map.
We're new and we're transparent about it. Here's what's done, what's in progress, and what we'll commit to as you grow with us.
Type II audit targeted for Q3
Data processing addendum available
Region selection on Enterprise plans
SLA-backed on Enterprise
Frequently asked security questions
Where is my data physically stored?+
Can you see my data?+
What happens if I cancel?+
Do you support SSO?+
How are passwords stored?+
Can I sign a DPA?+
Need a security review before committing?
We're happy to walk your team through it. No sales pressure.